Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NcKMEzqqUW8Gg0aTmyPELWcr_18.roa
File: NcKMEzqqUW8Gg0aTmyPELWcr_18.roa (raw, json)
Hash identifier: i5LeBhqV3jU7IiaVPnWXYvtBjLbP2EFBCjKE0XDKT+c=
Subject key identifier: 35:C2:8C:13:3A:AA:51:6F:06:83:46:93:9B:23:C4:2D:67:2B:FF:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886DA2C8C19ADD94849B8E84E2C5E54810
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NcKMEzqqUW8Gg0aTmyPELWcr_18.roa
Signing time: Tue 30 May 2023 17:09:24 +0000
ROA not before: Tue 30 May 2023 17:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6d:a2:c8:c1:9a:dd:94:84:9b:8e:84:e2:c5:e5:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 17:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35c28c133aaa516f068346939b23c42d672bff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:9b:7b:7a:bb:20:b2:27:ec:8a:22:33:c2:
61:0b:7b:c3:7b:fa:59:e8:86:b8:d5:2b:44:e2:bb:
c1:b8:7f:3e:67:06:c4:a9:b9:74:9f:bc:b8:19:ea:
86:84:7e:de:3f:8d:7e:35:a4:68:ea:9a:22:5a:d7:
81:51:d8:01:8c:99:0a:b4:3c:a8:fe:ad:82:30:58:
92:1c:b6:2e:19:65:7c:f0:85:d1:ce:03:87:58:3c:
f3:09:59:0a:dc:97:d4:ac:29:71:e9:ed:71:fa:3a:
d3:f6:87:40:77:d3:d5:36:fe:fa:54:ab:7b:1f:24:
13:48:e2:c3:1c:f2:ee:af:78:01:42:d9:1a:73:01:
2a:c0:af:1e:c7:a5:80:76:1b:f2:22:f1:9b:ae:47:
19:04:de:e6:1d:2b:08:7e:7e:4e:2b:85:f6:31:0b:
84:ea:4a:4e:c2:3e:ce:25:66:c4:b7:cc:fd:71:52:
b3:84:bb:ac:5a:44:43:70:b3:ba:35:b4:0e:c3:b6:
31:dd:67:46:22:66:fb:1a:9b:d5:37:34:09:6c:71:
9f:eb:5f:a8:81:85:11:1c:c5:a9:81:98:7b:77:ab:
74:66:d6:dc:6e:d2:ea:a7:e1:16:36:72:58:f5:c8:
25:f1:87:77:e9:9b:ca:5e:25:01:32:38:d6:1c:43:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C2:8C:13:3A:AA:51:6F:06:83:46:93:9B:23:C4:2D:67:2B:FF:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NcKMEzqqUW8Gg0aTmyPELWcr_18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:4e:59:ce:20:2b:ac:54:91:0f:41:25:65:6a:84:ef:74:c6:
d3:4c:0a:10:b4:c4:ed:77:0e:06:0d:d9:35:2c:d4:49:ca:08:
88:61:08:59:cb:15:ef:7b:f0:4b:ac:c9:59:72:0c:c2:77:88:
ce:41:98:ea:2d:85:33:ca:9d:6a:aa:11:69:20:4d:0f:ce:74:
5f:55:54:96:35:74:42:93:55:11:0d:82:e1:0e:ce:f7:2c:1a:
fd:21:7f:31:04:3d:2f:c0:f1:2e:91:a5:d3:ad:40:8e:b9:65:
65:ae:50:15:5b:a3:a5:c0:25:2f:1f:9f:48:45:fd:cf:9f:dc:
b6:f6:84:c8:f5:0a:cc:c9:45:4e:ae:2a:c5:dc:d2:8e:5a:87:
ab:9f:6c:2a:3d:0e:6b:4b:a9:31:01:7b:1f:34:96:65:3e:3d:
f7:a8:68:d7:2c:a9:f8:6f:06:23:51:19:d3:e4:bd:58:df:e9:
5a:42:e8:57:ae:38:0e:e1:40:a1:0e:ff:54:83:7c:16:a9:76:
c1:fd:f7:2f:69:85:a9:31:8d:4a:9d:98:d1:86:f2:4f:1b:12:
4d:66:cb:7a:3e:15:d1:06:c7:ce:96:4a:67:4d:f1:34:23:27:
46:8c:12:ee:14:1d:96:bf:d8:4a:eb:a0:19:7c:a4:dc:b5:ee:
f4:f3:82:a3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhtosjBmt2UhJuOhOLF5UgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMwMTcwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWMyOGMxMzNhYWE1MTZmMDY4MzQ2OTM5YjIzYzQyZDY3MmJmZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRCbe3q7ILIn7IoiM8JhC3vDe/pZ
6Ia41StE4rvBuH8+ZwbEqbl0n7y4GeqGhH7eP41+NaRo6poiWteBUdgBjJkKtDyo
/q2CMFiSHLYuGWV88IXRzgOHWDzzCVkK3JfUrClx6e1x+jrT9odAd9PVNv76VKt7
HyQTSOLDHPLur3gBQtkacwEqwK8ex6WAdhvyIvGbrkcZBN7mHSsIfn5OK4X2MQuE
6kpOwj7OJWbEt8z9cVKzhLusWkRDcLO6NbQOw7Yx3WdGImb7GpvVNzQJbHGf61+o
gYURHMWpgZh7d6t0ZtbcbtLqp+EWNnJY9cgl8Yd36ZvKXiUBMjjWHEOZ+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDXCjBM6qlFvBoNGk5sjxC1nK/9fMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTmNLTUV6cXFVVzhHZzBhVG15UEVMV2NyXzE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB9OWc4gK6xUkQ9BJWVq
hO90xtNMChC0xO13DgYN2TUs1EnKCIhhCFnLFe978EusyVlyDMJ3iM5BmOothTPK
nWqqEWkgTQ/OdF9VVJY1dEKTVRENguEOzvcsGv0hfzEEPS/A8S6RpdOtQI65ZWWu
UBVbo6XAJS8fn0hF/c+f3Lb2hMj1CszJRU6uKsXc0o5ah6ufbCo9DmtLqTEBex80
lmU+PfeoaNcsqfhvBiNRGdPkvVjf6VpC6FeuOA7hQKEO/1SDfBapdsH99y9phakx
jUqdmNGG8k8bEk1my3o+FdEGx86WSmdN8TQjJ0aMEu4UHZa/2ErroBl8pNy17vTz
gqM=
-----END CERTIFICATE-----
Generated at Fri May 2 13:13:12 2025 by rpki-client